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(57) Abstract: Method and system for 
supervising a usage of smart card by entering 
a customized policy or updating already loaded 
policy in the smart card is described. Hie 
invention provides a possibility to any authorized 
user to set and change selectively the card 
specification in accordance with the policy 
encrypted in electronic memory of the card. 
In accordance with the policy instructions, the 
card allows a cardholder to debit at least one 
preexisting currency account having a balance 
with authorized limited currency amount for 
payments at selected retail establishments, 
throughout selected territory, in a restricted period 
of time, and with a predetermined frequency of 
times when buying a specific set of consumer 
items and/or receiving a specific set of services. 
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SMART CARD WITH CUSTOMIZED POLICY 



FIELD OF THE INVENTION 

This invention relates to a method and system for use as currency cash 
substitute when paying vendors for goods and/or services by means of 
electronically encoded smart cards. 

5 BACKGROUND OF THE INVENTION 

Currently, the most popular methods for payment for goods and/or 
services are credit and debit cards issued by banks or providers such as Visa, 
MasterCard, American Express, or the like. Credit and debit cards are meant to 
complement usage of cash and checks, and even be a substitute for them. There 

10 are, however, significant differences between these two types of cards. 

In particular, credit cards, commonly, are issued by a bank or other 
financial institution that guarantees to pay expenditures that can be made by the 
cardholder. Most credit cards give a grace period with several days float and 
short-term credit at a cheap rate before the money will be deducted from the 

15 checking or saving bank account. Debit cards, on the other hand, are usually 
linked directly to the cardholder's bank account. Thus, when one uses a debit card 
to pay for a purchase, the money is automatically (and usually instantly) taken out 
of the bank account. This is a quick transaction between the merchant and the 
personal bank account without grace period, offered by credit cards. 

20 Regarding debit cards, commonly, two types of the debit cards are in 

usage. The first type is so called "on-line" debit cards. These cards usually are 
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enhanced ATM (automated teller machine) cards, which work the same as they 
would in an ATM transaction. It is an immediate electronic: transfer ,of money 
; from the customer's bank account to the merchant's bank; account. In order to 
; access his account at ' a store terminal, the customer must punch in his .personal 
5 identification number (PIN). 1 The system /checks 4 his account to ;4ee; if it has 
enough money available to cover the transaction. " * .:• < 

' The second type is "off-line" debit cards. These cards usually look like a 
; ; cre'dit card and resemble a credit "card transaction. The merchant's terminal reads 
1 the card, identifies it as a debit father than a' credit; card, and creates a debit 
i o against the corresponding bank account. However, instead of debiting the account 
immediately, it stores the debit for processing later, usually, within several days. 
' Most, but not all, transactions are Verified tot see If there are adequate funds. 
Instead, of using a PIN number, the customer>must sign a receipt, as he or she 
would with a credit card. ■ <■■. . .-jm:. t i.---. ,',r •>>:..-.■ - 

15 Credit and debit cards are gaining widespread popularity on business 

r: ' establishment since they offer the corisurrief many conveniences. For instance, 
u using the cards frees customers from carrying Cash or a checkbook, and the cards 
are even more readily accepted by merchants than checks, wherever the card's 
brand is accepted. Commonly; customers are not required to provide 
2d identification of give but personal information when using a debit card: This 
makes the transaction quicker and allows you to keep your information to 
yourself. However, there is a drawback, because the money spent using a debit 
card comes directly from the bank account, thus the customer may not be 
" protected from frauduleni use of his card or card number. 

5 ''' A method and credit of debit bard systems for providing a mechanism for 
1 supervis^irig credit or debit card usage disclosed U.S. Pat. No 5,953710 issued 
: v * to Fleming. The method and systems allow the' available credit to be determined 
' : by - some'ohe otfief than 7 the card issuer' arid that allow a • limit 'to 1 be- set on the 
;r: ' 2 num^-of^i)e»iciMif^s that ; eah ^ be-mader iri^par^iciilaff Fleming proposes a 
30 method arid' system', wherein % separate M credit (cafd : account' fdf ' a- child is> linked 



WO 01/35353 PCT/IL00/O0653 

-3- 

with a .parent's credit card account that allows a parent to make changes in 
available credit for the child's and parent's, credit card accounts without requiring 
: bank approval: The parent may: allow the child to make purchases unlimited in 
* '-"number/a limited number of purchases, or no purchases,, and the parent makes a 
5 ^single payment for both the chiW's and the parent's credit card accounts, , 

Despite the advantages,, the state-of-the-art credit and, debit cards have 

* -certain drawbacks. One isitheir^functional non-flexibility due .to the small amount 
■ of certain iriformatioh thatvmay^be stored in the cards. Typically, the information 

is - stored * in a magnetic^ strip attached \ to a credit and/or debit card. These 
io information may be, for- instance, ^ account identification numbers. Since a 

* memory capacity, of thisTStmp is lim aiid debit cards itself, for example, 
-7 do:not;contain;an indication ,of available balance. Thereby, if a card is printed for 
: : a specific, purpose like, a -debit card, like a credit card, or like any specialized card 

(telephone, gas, parking, and so like), the card's specification cannot be changed 
15 ■ during -thacard usage. ; ;:^v" -; - u 1 i: 

Ur. > - An improyement/ of; the^ drawbacks of the prior art credit -and .debit card 
i i systems may he achieved; by -utilizing smart, cards, that are the latest addition in 
the. world ,of^ example, U.S. Pat ; No ,4,877,947, 

■ U S. PaUrNo 5,521,362, U.S.. Pat, No ,5,649,118, U.S^Pat.No 5,753,899, U.S. 
20 Pat: No 5,8.1 r,77kiand -W.O^^at.^o 9,849,658A1). Despite smart cards are a 
* relatively-new^technology it already affects the .everyday, lives of . millions of 
< people. They n will ultimately influence the way when people, shop,, see the doctor, 
use the telephone and enjoy leisure, ... . 

Commonly, smart >cards are similar in appearance to conventional credit 
25 and debit cards, but unlike ^the ordinary magnetic strip of accredit and/or . debit 
; i .card a smart card contains, an; integrated chip.. The chip stores much more 
1 information of various ;tyRes like A electronic; data, and programs that are. protected 
; by advanced security Teaturesw; Customers can load a . smart cardjwith cash value 
:i v :tp pay, Tor, goods or r .se^icgs :i (an -electronic purse), collect -points, or receive 
30 : discounts^ loyalty c^dj :r cl&use 3 ^ a- cun-ency, value encoded on the card, decreases 
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each time the card is used, for instance,, in vending machines, in the copier or in 
v laundry machines. When the currency amount is used up, additional, value can be 

^ encoded on the card, v; ' ; - ;■• ■ ■■/■-■[ -.. >s. ji-jj.v ■= ! m.-:.j 

. :-± Smart cards have a number of advantages over magnetic stripe cards 
5 including greater reliability, higher ^security mechanisms, forage, capacity 
j. increased for state.ofVthe-.art smart cards by : up to 1000 times and the cards may 

- be-multifunctionali The anticipated workingJife ,of a smart card is several times 

longer when compared, to a conventional magnetic stripe card. ; , K . - : :t . ., 
; in view of the above, the aforementioned need in. the art for further 

io improvement of the supervising a usage of credit and debit card., to make ; their 

' specification to be more flexible, i:e. be. able tp : change the card policy during its 

- usage: this can be achieved by developing . a smart card system instead of usage of 
" : ^conventional credit and debit card systems.;;; ;, ; . < r ; i = rv; ; ,r ; 

is , GENERAL DESCRIPTION OF THE ^^TTIpN 

; I ^ The present invention. satisfies the aforementioned need by providing a 
novel method and system for supervising a usage of smart cards. This js, achieved 
~. -by entering a customized policy or updating r already, loaded policy in a smart card, 
; thereby making . the card specification to be more flexible safer and easier for 
i2o supervising.tThe invention provides a possibility, to any authorized user to set and 

- change selectively the card specification in accordance with the policy encrypted 
ji 1 iin electronic memory of the card. In accordance, with the .policy instructions, the 

- v .card allows a cardholder to debit at least one : preexisting currency account having 

a balance with authorized limited currency amount for payments atselected retail 
25 : establishments,: throughout selected territory, in a restricted period of time, and 
A-with a predetermined frequency of times, when buying a specific set of consumer 
: : n s iitems iand/or receiving: a specific setof services. .Xhe policy dQtern^ning the card 

specification may be unique to reacfe- card,!,andi it ,allows^set^g jUiinit on the 
. manner of the ;card usage even*hy someone other than the card issuer. -, . 
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( According to one embodiment of the invention, the preexisting account 
provided by any payment institution, and it may be any credit card, any debit card 
or other account that is provided, for example, by Visa," MasterCard, American 
' Ekpress; unemployment* compensation, or the like. In these situations, the card 
5 itself rtiay not contain an account indicating available credit .and the amount of 
purchase from the vendor may 'be directly withdrawn from one of the preexisting 
1 Vccourits' provided by the authorized user, within the policy r restrictions, by 
correspondingly reducing 1 the available <therein currency., ; . ) V i * 

According to another embodiment of the invention, the preexisting 
10 account* is prepaid in advance -electronic current is stored inn the card 

- memory and that was ihstalled Within the limitations of the policy. ;In:this case, in 
^' opferStibn; ^ might be withdrawn , from the 

account of the electronic card itself by correspondingly reducing the, , available 
currency stored in the card memory. 
15 According to yet another embodiment of the invention, the preexisting 

account may include a combination of both sources, -'and may be ari account 
provided by a payment" institution together with prepaid in advance electronic 
currency.- r - v * ; ' ?w f -l * . " ' • ' v \.< vr <wc:t 

1 According to this invention; the systeib for entering or updating a; policy in 
20 a smart card includes a centrar server apparatus of the card provider: thaving a 
storage device and configured to be in access with a preexisting ; bank^accqunt of 
an authorized user.- The system further includes a specially, designed, one or more 
terminals f6r entering or changing earlieir r encrypted policy in the smart card. Each 
of the specially designed terminals, which may be remote or close disposed, 
25 includes 1 a policy introduction keyboard, a card readerTwriter unit and should be 
configured to access central server apparatus and a display for displaying policy 
5 statement* entries. 3Fbr example^ ^ displayed text can tell the user how much 

- money is* being ^deducted ; In 
^accdrdahce with the invention from ; the; authorized; user for 

30 reloading a new pblicy ^ih the ' -card also might be sent to -the . terminal via 
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: conventional telephone, cellular phone, Internet, or any other computer network, 
i.e. without using , the policy introduction keyboard of the specially designed 

- terminals. ; " ■•■ ' ' "■- ; ■ ■ ~- •■■ '■ i - : - ' ■■ -*'■■> ? • ' 

v; :;r . .. 'V The terminal may further include a.cash value adding unit in case the card 
5^ - is. designed to have prepaid electronic currency.stored in the card's memory, and 
v authorized user chooses this way to replenish the card balance,;The cash adding 
unit should provide a possibility to transfer la^alue onto the card equivalent to the 
* ^amount of cash inserted into the unit. , ; on si« . - 

v According to the invention, the user may replenish the card balance via 
10 Internet or even at any point of sale equipped;witha card reader/writer unit via 
online transaction. In this case the, money. rmay be downloaded into the card's 
^ memory from the user's bank account; .<):<tv.^ ' v> ^ ? . 

; According to the invention, the system should be configured in order to 
; provide the user with an opportunity to download the predetennined by the policy 
; i 5 : balance of money into the card either whenthe entire amount will be, expired or 
earlier, after usage a part of the balance. In .the later, case, the deducted amounts 
.< ;i ^vHH tfc.<*eplemshed immediately, during every on-line debit or credit transaction, 
within the same connection. ; . ^ : 

-v.v; ■ .. According to the invention, organization of the policy imposed on the card 
20 usage may have several levels. For example, on the first level, a policy may be set 
in me central server apparatus by the service provider. This first level policy is 
aimed to meet the tax regulations of the Internal Revenue Service or any other 
equivalent organization of each particular country. On the next level, a policy 
; ' > may be business oriented. This policy nested within the policy established on the 
25 first level and may be set already by an authorized user; This will insure that any 
transactions made by using ithe card: rwould - be tax deductible and business 
" oriented. By the same token,' a cardholder,, which received the card from the 
. ^; authorized user,, may set his own; policy .that-will be nested withinJthe- policies of 

the authorized user and the vcard;proyider,ho;w • ^ v .-.v " 

30 According to the invention, ^^?the::smart<card, depending on the customized 



WO 01/35353 PCT/IL00/006S3 

-7- 

policy, may also be a multifunctional card, which includes a memory unit for 
storing the encrypted policy and a processor chip programmed, according to this 
policy. The policy may combine the electronic purse function with a function of 
; ' other applications related to registration of data and information. With these other 
applications,' the cardholder, for instance,- may use the card as a public transport 
■ ticket, andVor for access to -buildings and rooms. Potential uses might include 
vending machines; residence laundry, and parking meters. . . . • < 

Accordingly, there are no restrictions on the appearance of the ; card and 
;i the types of functions other than the payment options.. As. it may be clear to those 
io skilled in the art^ the card may additionally be . equipped with- av-keypad and 
display and be integrated together with a digital calculator. Further, the electronic 
chips of the card may be additionally programmed in order to- provide various 
functions;, for example, the- card may provide a calendar, and/or transformer of 
I theicurrenf values of one currency into a value of any. other currency, and many 
1=5 others functions: Further; the- card may.' be .equipped with a, beeper for> giving a 
1 r v signal when needed, i.ei if any violation of the card usage is registered.- 

- According to the invention; the smart card may additionally be, equipped 
with a magnetic strip in order to perform all the functions- of the state-of-the-art 
•credit and debit cards in the framework' of; the encoded ; policy . When the card is 
20 equipped with in a magnetic strip, verification of various validations imposed by 
the policy will by carried -out, for example, via connection to the central server 
> apparatus. Hence, this card will combine the functions of conventional .credit and 
debit cards with all the functions- described-in the .current invention. Such a card 
may be associated with more than one, accounts that- will be available, 
25' respectively through the magnetic strip and the connection .means (via electrical 
contacts or contactless) as- described above. 

^According to the preferred embodiment of the invention;, the , authorized 
'user 'is an account owner himself, ©r ther cardholder is any. .person entitled to use 
the card after receiving authorization from the authorized user. : ■. :'' . 

According to . another -preferred: embodiment . of. the invention, the 
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authorized user and the cardholder are a parent and his child, respectively, 

. According to yet another preferred embodiment of the invention, the 
authorized user is employer, who wants to supervise a usag;e <q>f the card in 
y {.purchase only workrrel^ted items by his employee, who is the. cardholder. 
•: 5 : - ^ ;j r; According, to the invention, if the cardis stolen pr jpst the, authorized user 
■ or the cardholder can change the policy by locking the card wjth a special code to 
* prevent its misuse. , When locked, transfers • frpm the card are not allowed and 
; i statement entries cannot be displayed allowing r the owner to keep^ his ^currency 
l i ; secure. ' . r : u ;••'<■ ; ; ; -nO" ^ , / ■< _:>.*. k - ;: , .> n 

to v ; , As will become clear to, those skilled in the the method and system for 
- ., supervising a smart card of the invention differs described 
methods without the use of policy encrypted in the card, pie advantages of this 
; ^technology are far-reaching. Customers will benefit by use of the technology of 
? this invention since it increases the quality of their life. For instance, a smart card 
;i5 ^with the policy, which allows ^cardholder tp use only limited currency amount, 
cannot be used beyond its balance. Hence, children will be able to use it without 
worrying about building-up debts on .their parent's bank account. The use of a 
. : smart card with customized policy may-not f involve the documentation work 
^associated with conventional credit cards siiice no signature is required when the 
20 maximum sum deducted is relatively small. When this amount is large and 
1 exceeds the threshold determined by the. policy , the use of PIN code pr ; biometrics 
v may be involved, that means that a person can be reliably identified by his/her 
: i hand, fingerprints, retina of the eye, and/or sound of the voice. ) The PIN code and 
a biometrics data may be : stored in the card's memory, and the identification may 
25 not demand a retrieving such information from the central server apparatus of the 
r-ri card.provider. As will be clear to those skilled in the art, that authorization for the 
^ iise;of electronic: informatioa stored^ performed by 

o ; using a spote^ -r - : ; r ^ ^ 

ru:> r i?ir c - According to -the inventionpan authprized . user. or x^^Qld^r, may receive 
f 30 at any time information stored jiathe^card about the finanpial transactions made 
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by' L using the card. For instance, the users can retrieve the information about the 

number of invoices and/or numbers' accounts wherever the transactions were 

>■ *• ■ ••,■ .■..«.,. . . t- ■ 

*' performed. " ' " • - - • - 

• ,c,rj; The significance of tHe technique arid applications of the- invention goes 
' : 5 beyond I the preparation of a means for a payment for goods and/or' services. Smart 
l: cafds with ; a customized pbli'cy encrypted therein may be programmed for many 
customers specifications and tody be installed* for instance, into the following 
environments: Education ^'S^ddls; Colleges, Universities);- Hospitality (Pubs, 
Restaurants, Hotels); Clubs (Golf clubs, Health clubs, Night Clubs); Retail (Pet 
io Shops; Salons, Boutiques)- Public Sector ' (Catering, Libraries) and so-;, like. 
" According to the invention? the policy and thereby the loaded specification can be 
! easily chahged a£ soon aVme cafti owner will decide to do that. •?..■'■■> v. "-r 

^r, r Accor( iihg to the' invehti6ri, v the system should be configured :in order to 
' ' " provide' the User wim an op^rmiiity to receive a report, depending on his choice, 
15 about air or at' least a part of the- transactions' conducted within a predetermined 
period" of time. The accdurit ; owner : may iirtsert a :policy that . some of the 
* - information will-riot be presented'in'his monthly report."' ^ : ''•':- !: ' v, ' 

1 i;; The present invention r thus provides a method for supervising ^ usage of a 
" ,L smart card for payments for goods or services by debiting at least one preexisting 
20 currency account having a balance with an available i currency amount, the 
' method including the step of setting a specification of said smart card .by entering 
into electronic memory of the card a policy that provides a: possibility to any 
' J authorized user selectively to -set and change limits on the card's usage; said limits 
are at least 1 one member from- the group including: (i)' a limit on t the- available 
25 currency amount to' a predetermined maximum- amount; (ii> a limit on the 
currency value that is allowed^ to spent for each specific item; (iii> an appropriate 
' time period during which the payment can be. executed; (iv) a: selected territory 
where the payment can be executed ->(v) selected; retail establishments. wherein the 
V payriteritxatf •be'exeSuteftVTW a'* fiteqftency of times when/the^ payment can be 
r 30 ' executed; (vii)- a specific' set - ? of- items- for -receiving which the payment can be 
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execiited; (viii) a specific set of services for receiving which the payment can be 
executed. a . ; ^ 

• • " U; ■"''""Tliisinvenfion-also provides a system for supervising } a - usage of a smart 

card by Entering a policy into the card that provides a possibilin^ to .any authorized 
5 iiSeir selectively to set or change a card specification for payments for goods or 
* ^ services by debiting at least one preexisting ciirrency account haying :a ; balance with 
' in available currency amount; the system comprising: ; ;• ' 7:^ r ■, 

(i) a preexisting bank account of the authorized user; ^ 

(ii) a central server apparatus of thercarrf provider configured to be in access 
10 with a preexisting bank account of an authorized user, said central 

' 1 • server^apparatus having: ^ojcndv : , :•; . : . 

• "'■*• ■'• : " 5 ' '* • (a) a central computer; - -v-v,: >■ ,: ; --.i j 

(b) a storage device coupled with said central computer; 
' (1) an at least one term central server apparatus 

15 7 v ' w 6 comprising: ; ! "- 

- : '•• ? (a) a policy ihlroductibri keyboard for entering instructions from 

••• ' irS ' : --' r ' the authorized user for setting and reloading the policy in the 

card, said policy being at least one member from the group 
n ■ - ' ' including: (i) a limit on the available currency amount to a 

id - " ' ' predetermined maximum amount; (ii) a limit on the currency 

value that is allowed to spent for each specific item; (iii) an 
appropriate time -period during which the , payment can be 
executed; (iv) a selected territory where the payment can be 
executed; (v) selected retail establishments wherein the 
1 25 payment can be executed; ( vi) a , frequency* of times when the 

' ' payment can tie executed; (vii) a specific set of items for 
; ^ : re^eiviri^ payment can be executed;;^ 

- Jcv v - ^ c:-' - ; • ' v * ' -'set-^of ;,< serviCes?^ fd£' : f&eiviiig J > whielPthe payment can be 

• r " : Ki : . ■ r "'exe6uted;^ ,4V: " ;:; ' v ^tr^-;^ - ,: ; - / - ;/^.--'*-;c;: 

30 (b) a card reader- writer device for entering the policy; and 
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> :v (c) a display for monitoring policy statement entries, card's 

history and statistics. ; 
; : ; ^.i v~The/ present invention further provides for- use in- the system of the kind 
; f l ' specified kb6ve a preexisting bank account of the authorized user.,. > ^ 
f fc 'o7 ^ '-The present invention use . in the system of the 

" kind specified strove a central server apparatus of the^card provider configured to 
be in access with a: preexisting bank account.ofvan, authorized user, said central 
server apparatus having : s i*iu wj' \y c;* ^ ; ; . . ; .c ju 
^ - * " - ^ - t (a) a^entra^omputer; - ;^ , . ; . r . ; 
l( f : . \ (b) a storage device coupled with, said central computer. 

The present invention further provides for use in die system of the kind 
specified above a at least one terminal coupled with said central server apparatus 

comprising^ j \ ? ; . 

-pi; .v/. u^(a) a • policy /introduction;, keybo^ instructions, from the 

15 authorized user for setting and reloading the policy in the card; 

■r o , (b) a card reader^ writer device for entering the policy; and 
■ r\ -i (c) a; display. for ; monitpring policy statement entries, card's history and 
..; -: -\* i ; - ^statistics; *;; j * . ^ 

. ; : The present invention yet further provides for use in the system of the kind 

20 -'specified above a : smart card- storing data indicative of a policy that provides a 
; ^possibility to any authorized user selectively to, set and change limits on the card's 
usage, said, limits are at least one member from the group including: (i) a limit on 
:the available/currency .amount to a, predetennined maximum amount; (ii) a limit on 
the currency value , that is allowed to spent , for each specific item; (iii) an 
25 appropriate >time period during .which the payment can be executed; (iv) a selected 
territory where the payment can ,be. executed; (v) selected retail establishments 
; wherein the payment can-b^ executed; /vi). a. frequency of times when the payment 
;^can be executejd;v(vii); a- u spepific : set, qf- items/or, receiving which the payment can 
be executed; (viii) a specific set of services t for receiving which the payment can be 
30 executed;, v.v/- o *,z~*sk v- ^'.l? v.... r« ; > 
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BRIEF DESCRIPTION OiF THE DRAWINGS 

In order to understand the invention and to see how it may be carried out in 
practice, a preferred embbdiirient will now be described, by- way of non-limiting 
example only, with reference tomeaccompanying ^ dfawirigs, in which:' ^' 

Fig. 1 is a schematic; diagram illustrating the system for entering or updating a 
policy in a smart card in accordance with the invention; ;; -'•-■^■■v.'^rj 

Fig. 2 is a flowchart of the logic to be Applied in an interaction of a cardholder 
10 and a vendor reader device according to the invention. 

DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS, 

Reference will now be made' in detail to the detailed description of the 
invention in conjunction with me preferred ernbodiments thereof. It should be 
understood that the described embodiments are not intended to limit the invention 
^'specifically to those embodiments. On the contrary, the invention is intended to 
v cover alternatives, modifications and equivalents, which may be included within 
the spirit and scope of the invention as defined by the appended claims. 

' Referring first to Fig: 1 the system 1 for entering or updating a policy in a 
smart card (not separately depicted in the figure) of the present invention includes 
20 a central server apparatus 1 1 of the card provider having a central computer 12, a 
storage device 13 and configured to be in access with a preexisting bank account 
' 14 of an authorized user. The preexisting bank account may -be provided by a 
payment institution 15 and may be in a form of any credit "card, any debit card or 
other account that is provided, for example^ by Visa, MasterCard, American 
25 Express, unemployment compensation!/ or the like. . ■ ? 

The system further includes at least one local terminal 16 placed in the 
vicinity to the main server and one or more remote disposed terminals 17. The 
terminals 16 and 17 should be toiirigiir^'to^access central server apparatus 11, 
arid are designed for entering a : new policy" or changing encrypted earlier policy in 
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a smart card carrying a chip for policy encrypting. , ...... 

- Each of the terminals includes a policy introduction keyboard 161, a card 
reader-writer device K 1.62. Each terminal further may include a display 163 for 
monitoring policy statement, entries, card^s history and statistics. For example, a 
5 displayed text can tell the user how much money is being deducted and how 
much is>left-on : tJie balance/ p In accordance with the invention, the 

instructions from the authprized user for reloading a new policy in the central 
server apparatus might be sent to the terminal via regular or cellular telephone 18, 
. : Internet, 19 or any .pther, communication , way, i.e. without using the policy 
io introduction keyboard. 1 61 of the local or remote disposed terminals. 

The terminals may further include a cash value adding unit 164 in case 
when 'the card is designejdvtQ ;haye;"prepaid electronic currency stored in the card 
h, memory, and, authorized user* chooses this_unit to replenish the card balance. The 
cash adding unit that should; provide a possibility to transfer a value onto the card 
15 , equivalent to, the amount of cash, inserted into the unit, ^ 
-h t According to the invention,; the user may replenish the card balance via 

Internet- or other computerized, network. In .this case the money may be 
downloaded into the -card's memory from the user's bank account. For example, 
; the user may set in the policy,, that this replenishment will be r automatic within 
20 _ev§ry online transaction. k , , . v _ ... 

mXt , t In a method of use, an authorized user approaches to a card provider for 
. issuing and obtaining at least one blank smart card. An authorized user may be 
any account holder haying at least one account that is provided by any payment 
- institution, for example, by , a bank, Visa, . MasterCard, American Express, 
,25 unemployment compensation, or the like. The blank card then can be sent to any 
user of the card. For example, the card may be given to a child or a mentally 
infirm elderly^ person, or any other person who is needed supervision of 
r expenditures. : . >. ;Vt v , v ... . . , . . . _ ^ , . ; 

:> i .j - v ;Tliei blank card obtained from, a provider may further be loaded with a 
30 -customized.policy that Js. contemplated m advance. In accordance with the policy 
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instnictions, 'the card allows a cardholder to debit at least one; given; currency 
account having a balance with authorized currency amount , > > 

" According to one preferred embodiment) of the invention, the given 

^ i account is a preexisting bank account provided by any; payment institutions. In 
5 ' these situations, the card itself may not contain an account indicating available 
credit. In this case the amount of purchase from a vendor may , be directly 
Withdrawn from one of the preexisting accounts provided by the authorized user, 
^ Within the policy restrictions, by correspondingly reducing the available therein 

• currency. "" - l •' ■ ' ' : • -^^-f • v*/- ^\ • \ , : • v, 

iq f According to another preferred embodiment of the invention, the given 
' account is prepaid electronic currency that iis stored in the card memory and that 
was installed within the limitatioris^'of •theLpolicy.^IH' operations the currency 
; amount of a purchase may be withdrawn from the electronic card itself by 
: tbrrespondingly reducing the available currency stored in the card memory. 
W > The source for further replenishment of the electronic currency installed in 
n ^ tlie account of the ci^d is predetermined by the suitable 
K fonn such as a cuifericy value addied unit 164, and/or a preexisting ;bank account 

provided By the payment institution 14. - r • 
, - ^ The policy encrypted in the card should allow the user to set a margin on 
26 " ' the manner df the card usage. For example, the policy data are stored in the card's 
mbnibry and might preferably determine a maximal currency amount that can be 
v 1 spent for payments at selected retail establishments throughout the selected 
territory. Further it also may determine a restricted period of time of the card's 
availability for buying a specific set of consumer items and/or receiving a specific 
1 25 set of services. The policy, additionally, may determine a predetermined 
frequency of times when the purchase of each specific item is allowed. 

Accordingly, as soon as the policy is contemplated it may be introduced 
^ into the stctfa^ d server apparatus? 11; The introduction can 

"be pe^ 17, or 

30 via usage the telephone 18 ofThterriet l$AH this case downloading the policy and 
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encrypting it in the card' may be done later by the cardholder as soon as he will 
approach to the card reader-writer device 162 at any point of sale. 
'.. '•■ , • 'As it can be clear to. a versed man, the current invention introduction 
■ 4hstfuctioiis'of the customized -policy from the authorized user to .a smart card is 
-5 * not* bound to these particular, terminal devices and other communication ways 
•M may be used. For.exampler.a card reader-writer unit .may be installed in a cellular 

- phone of- a. 'cardholder. Thus ;.the t cellular . phone .that, may work, as the remote 
:. disposed terminal; 17. .ki='thisjcasje it a customized, policy can be downloaded in a 

memory module of the cellular phone wherein it can be stored in_a protected 
•10 ^ form. 5 Further, the cardholder,, if desired, may. insert a smart . card in the. card 
reader-writer unit of the* cellular phone, for entering and encrypting the policy in 
meQard.inthemarmer.as^«sgrib€d.ab9yc 4| .- . - : ;- 

. - In a method of use, the central server apparatus 11 receives a call from an 
. T- authorized- user rrequesting-aniauthorization code for introducing a policy, and in 
« is - response thereto, verifies funds in? a preexisting customer account and provides an 
active authorization code, allowing introduction of , the policy and its storage in the 
storage device 13. Only the authorized user, providing an authorization code in 
the form of a PIN code or any other method of identification, |s . able to change 
-the policy. For example,, .a use of Biometrics may be involved in the 
20 authorization, that means that a person can be ; reliably identified by hi?/he ; r hand, 
tj fingerprints, retina of the;eye, and/or sound of theypiee. As_will.be, clear to those 
r skilled , in the art,' that for the authorization, the use, of electronic information in 

- smartvcards may be even performed ^by using a spoken word or the touch of a 

: hand. „• . , . - ; • . , . ... - «..• . 

25 : -. As long as the policy information is stored in the storage device 13, it can 
easily be transformed at any time into the electronic memory of a smart card to be 
. - stored, mere - in the. encryptedxfprmi . •. •. . -.• • . •* • 

• * i.; ..The smart card includes .a housing, a means that proyide^a communication 
£ : ; t between the "card and a^readerTWKiter j: deyice pf .the terrrunal, ; a memory, and a 
* 30 processor -.operatively joined, to the .memory. In. a method of use, in order to 
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download the policy from the storage device to the card the cardholder should 
establish an operative connection between'- the-'reader-writer: devices! 62 of the 

terminal and the card through a connection via electrical contacts or in a 
" eontactless manner, and provide the corresponding transaction command. Such 
5 connection can, for example, be via electricjarcbhnectdrs on the reader- writer 162 
and the card. The connectors provide transfer data to and from the card's chip. 
Thus for establishing the contact eorinectibri; the card should be inserted into the 
reader- writer device 162 that makes direct electrical contact. In case of 
r ' 6ohtaetles£ Connection, the readef-writer^devi(5b 162 and the smart card should be 
io equipped with dontactless'means that provide a transaction when the card, with 
an electronic microchip and an antenna embedded inside, be passed near an 
antenna of the contactless reader-writer. ~ ^ > 

According to the invention, the authorized user can always modify and 
update the policy that is already stored M the storage device" 13. The modified 
1 W policy is reloaded in the smart card in order to update the policy stored therein by 
" the same rhknner a£ described above. This -policy remains fixed in the card until 
"' : '- : '^the authorised user chooses to change or update it, or until the policy expires its 
' validly ^The expiration date Is a part of the policy and the authorized user may set 

the expiration for each part of the" policy on his choice. 
26 As if also may be clear to those skilled in the art, the card may additionally 

be equipped with a card keypad, a card display and a source of energy (a battery 
or" a ^hotbelectric cell). Accordingly, such a card, for instance, may allow a 
' tourist to transform a typed amount of money from one currency to another 
currency of his interest. Such a card also allows any cardholder to lock and 
25 reactivate the card by typing a personal code onto the card -itself, This, for 
example, will enable users to leave their tards in wallets unguarded without the 
threat dfrnisiise by others. v * : i ' 1 f ' 
■ ^ As it will be clear to a versed 'man, the smart card ihay additionally be 
} equipped With a magnetic : strip in brder td perforin all the functions of the 
30 ' state-6f-tlie-art credit and' debit car^s in th f e" framework of the encoded policy. 
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Hence, this card will combine the functions of conventional credit and debit cards 
with- all the functions; described in the current invention. Such a card may be 
associatedLwith more than one accounts that will be. available, respectively, 
r . ; through rfhe magnetic strip and the connection means (via electrical contacts or 
eontactless) as described above. , . , . 
. x- \ ; ; The .method of usage v the card in accordance with the present invention 
. ?.may; be best understood by* referring to Fig 2.. Accordingly, a . cardholder 21 
jr. presents;the card (not separately depicted in the figure) .as .a cash substitute at a 
o xetaiLoutlet 22 that may be a vendor machine or establishment 221 for retail of 
io drinks, snacks, fast food, etc. By { the same token, the cardholder may present the 
. > card at a service provider ,222, ; ?uch as, telephone, car wash, or the like. Each 
recipient entity (221 and/or 222) has a card reader 221 1, which is integrated with 
v ; -a processing device 22 1 2 and a transaction device 2213... 
, u. : - i .The /processing :deyice. processes , the smart card according to the policy 
15 ^ encrypted therein, whereby da^ta, stored, in th? smart card are altered to. represent a 
r registration of performing of a financial, operation or providing pf a service. The 
■ registration is needed for, preventing overuse the card oyer the policy regulations. 
> The processing of ; the smart, card jnclydes a sequenqe^of physical 

operations related to verification of various validations imposed by the policy that 
20, prevent the smart card usage, by an unauthorized person, who has found or stolen 

i * - „ * * /r 

the card. . ■ - . ? t ^ t ^ ^ r 

, , > The verification of various validations may include, for example, a user 

? - validation check 23 that may, be , done by state-of-the-art methods through the use 
; of a PIN secret code and/or biometrics. For example, if the cardholder is a child, 
25 then his fingerprint encrypted in the, card may be use for his identification. 

h Accordingly, the. 4 money could only be deducted from the account 
associated with the card if the entered PIN code or the biometrics match those 
prescribed by the policy. If the^cardholder made a mistake, a new attempt of the 
** -...v verification may .-be allowed. A number of fallacious attempts tq enter the code is 
30 ^counted by a counter r 24, this number. is limited. If,this number exceed a number 
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that is predetermined by the encrypted policy, then the smart card will be 
"locked" 28 or retained by the terminal and will not be available for the further 
. use. If so, the authorized user will be notified, and he will be to reactivate the 
card at will. 

5 Sometimes, the policy may be set to allow a payment only for selected 

items, or for items of relatively small amounts of money without a secret code. In 
this case the maximum sum of the deductible relatively small amounts of money 
may be defined by the policy. Hence, an unauthorized user who does hot know 
the secret number can thus use only mis maximum sum of money so that the 
io damage is limited. 

The verification further may include a card balance check 25, that may 
follow the user validation check, and is intended for retrieving the available 
credit for the cards that have been set by the policy. 

The further validation checks 26 prescribed by the policy might, for 
, 1 5 instance, include an item validation check (riot depicted in the figure) that provide 
a possibility to buy only specific items ; throughout the selected retail 
establishments on predetermined territory, while excluding other items from 
consideration. Thus a parent providing a child with such a card allows the child to 
buy only a specific most essential set of items at selected stores and exclude 
20. certain luxury items or adult materials. Hence, the child does not have the 
freedom to squander money on needles, frivolous, or harmful items. 

As it might be clear to a versed man, the further validation checks 26 
prescribed by the policy might include a verification of a period of time eligible 
, for shopping, a predetermined frequency of times when purchasing of specific 
25 items is permitted and many others, depending on the card functionality. The 
. locking operation described above can be applied in accordance with the policy to 
any .verification step for preventing a misuse of the card. Since only the 
authorized user and cardholder knows the details of the particuiar policy, an 
unauthorized person who found or stolen the card will not know, for instance, 
30 where to buy and what items are allowed for the purchase. It means that the 
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locking operation will quickly deactivate the card after one or several fallacious 
attempts, as.it was defined in the policy. 

Recording to the invention, when the card is equipped with in a magnetic 
strip, verification of various validations imposed by the policy will by carried out, 

s for example, via connection to the central server apparatus. 

According to the. invention, after passing the verification steps a further 
step is monetary (or its equivalent) transactions 27 from the given account 
indicating available card credit to the corresponding means of the card reader of 
the recipient entity. The transactions may be executed by conventional methods 

io either from a preexisting bank account and/or from the prepaid electronic 
currency stored in the card. 

Those having skill in the art may understand that there are no restrictions 
on the appearance of the card. The size and shape of the card, for example, may 
be determined by an international standard (ISO 781 6). This standard also may 

15 define the physical characteristics of the plastic, such as temperature tolerance 
and flexibility. It also defines a position of the electrical contacts and their 
functions, if the means that provide a communication between the card and a 



card-reader-writer is via the contacts, and how the integrated circuit 
communicates with the outside world. Several types of plastic may be used for 

20 the smart cards of the present invention, for example, such as PVC (Polyvinyl 
Chloride) that can be embossed but is not recyclable, or ABS (Acrylonitrile 
Butadiene Styrene) that cannot be embossed but is recyclable. 

Since the main components of the smart card, such as a card processor 
chip, a card memory unit, and a source of electric energy may be miniaturized, 

25 then the card may be integrated with any utensil carried by a cardholder, for 
example, with a watch, spectacles, jewelry, etc. 

While the present invention has been described in terms of several 

preferred embodiments, those having skill in the art to wfiich the present 

7* . - yy-yy., yy* zwo*^ * -♦•>$. • i-,y t yy '.^y ^y-x'^iX A 

invention pertains can now perceive various modifications, improvements ana 

30 additions, which may be made by the invention. Accordingly, when a user utilizes 

i t.'W*-- .' ?cr>i.y ?;f? i r. yr> : - : } ry .< .■! •/ vr;" 
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the smart card for payments of small amounts of money, for example, one dollar 
or less, and the payment institution is unwilling to perform small amount 
transactions, the user can introduce a policy in the card to debit the preexisting 
^ currency account in batches. In this case the! debit amounts will be stored and 

5 accumulated in the card's memory; and in the central server appaf atusv and only 
when amount of money will reach a predetermined value, of when a 
predetermined period of time empires, die 1 financial transaction will be performed 
for the entire batch. v ^ ^ - v 

Further, the smart card may be ^ multifiirictibnal card. Tlie policy may 

10 combine the electronic purse function with a' functioh of for other applications, 
relating to the registration of data and irifbrihation. With these other applications, 
the cardholder, for instance, may We it as a public transport ticket; arid for access 
to buildings and rooms. Potential uses' indude Vending riAachiries; residence 
laundry, parking meters, etc. There are no restrictions on the types of functions 

15 other than the payment options. Accordingly; as it may be clear to those skilled in 
the art, the card may additionally be integrated together with a digital computer. 
Further, the electronic chips ot the card mky be additionally prograhuried in order 
provide various functions, for example, the card may provide a calendar, and/or 
tr^sformer of the current rates of various currencies and many others functions. 

20 f v r ItWiltdlso^ should 
be suitably programmed. Likewise!, the iriveritibh contemplates so being 
readable by the central computer for executing the method of the invention. The 
invention further contemplates a machiiie-reiadable meiiiory tangibly embodying a 
program of instructions executable by the machine for executing the method of 

25 the invention. 

' The scope of the invention is ndt : to be construed as^ limited by the 
L - : illustrative e^ is to be determined in accordance 

" " With^^'a^pertded^lainis. ** y **& ^-^--'v^ :r '-- r^iv^oc . n; ; 
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CLAIMS: . . , 

^ ,1., A ^method, for supervising- a usage of a smart card for payments for goods or 
; ^services hy debiting at least one preexisting currency account haying a balance 
t , -with an available .currency amotant,, the niethod including the step of setting a 
-5 specification of said smart card by entering into electronic memory of the card a 

policy that provides a possibility to any authorized user selectively to set and 
... .change limits Qn. the. card's usage,. said limits are at least one member from the 

group including: (i) a limit ? on the available currency amount to a predetermined 

maximum amount; (ii). a limit on the currency value that is allowed to spent for 
io . each .specific item; (iiiX^ 7 appropriate time period during which the payment can 

be r , executed^ the payment can be executed; (v) 

. ^ selected ^ payment can be executed; (vi) a 

: M frequency of times ..when ,the,. parent .can be executed; (vii) a specific set of 
, items, for receiving jwhich the ^ pajoiient can be executed; (viii) a specific set of 
15., services for receiving which the payment can be executed. 

r - . 2 V The method of claim 1 - further comprising the step, of .locking the smart card for 
-deactivating said,; card when a, number of attempts violating ^aid limits of the card 
? r usage exceeds a predetermined number., v . w . 4 

3. The method of claimi ^.fi^gr^comprisinjg the step of reactivating the smart 
."!* .card. - - : r> •? - - ; -* , t , > . ... 

4. - A, system, for supervising a usage of a smart card by entering a policy into the 
25 card that provides a possibility to any authorized. user selectively t tQ x sf t ot change a 

card specification for payments for goods or sefyices^by^ one 
preexisting currency account having a balance with an available currency amount, 
the system comprising: 
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(i) a preexisting bank account of the authorized user; 

(ii) a central server apparatus of the card provider configured to be in access 
with a preexisting bank account of; ah authorized < user,; said central 
server apparatus having: 

^ ^.--.j,; - ( a ) a central computer; ^il-k: -w,.^ X c 

(b) a storage device coupled with said central computer; ; 

(iii) an at least one terminal coupled with said central server apparatus 
vrtU: l ' comprising: ' > ,.±-<- •'.^•ic*/-' * Mi. is ^ . i' »?' 

(a) a policy introduction keyboard -for- entering instructions from the 
10 authorized user for setting and reloading the policy in the card, said 

i -'»- i ; policy being at least one member from the; group including: (i) a 
limit on the available currency amount to a predetermined 
maximum amount; (ii) a limit on the, currency value that is allowed 
- to spent for each specific item; (iii) an appropriate time period 

15 during which the payment can be executed; r (iv) a selected territory 

h v u '■. ; where the payment can be executed; (v) selected retail 
~ ' " establishments wherein the payment can be executed; (vi) a 

frequency of times when the payment can be executed; (vii) a 
.1- j specific set of items .for receiving which the payment can be 

20 executed; (viii) a specific set of services for receiving which the 

payment can be executed; 
. v :.z;j><> -;v„* (b) a card reader-writer device for entering the policy; and r; 

(c) a display for monitoring policy statement entries, card's history and 
T' 1 •■ ■■" - -statistics. :v':. .■ . ■ / <■ : . ; 

M' ! ~ -'Si The system of claim 4 wherein the preexistrng bajik, account is provided by a 
payment institution selected from the .group consisting of a credit card, a debit card, 
an account provided by Visa, an account provided by MasterCard, an account 

> <• provided % 'American Express, and > an ' account pr^ided vby unemployment 

30 compensation. .i/j? :< KOftB'*'3jii3~ , .b™u -.vbbo'. .•:»* 
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6y -The system of claim .4 further comprising a connection via a telephone or 
- cellular phone for introduction .the policy into said storage device. 

5 7. The system of claim 4 further comprising an Internet connection for 
introduction the policy into said storage device. , ~ 

8. The system of claim 4 wherein said terminal further, comprising a currency 
value'added unit for storing 5 a. prepaid electronic .currency in the;card. 

• ' -9.-- 'The "system of any *©ne^ of: the, preceding- claims = wherein the smart card 

■' ir - r 5 comprising: < :• y .>•«?;*.': i:. v M . < -' r -\ 

' - w y- •• a c^d^processor chip, programmed according.to the policy; 
'•''■'{ -vc in x (iiy. a card memory unit coupled with a card processor for storing the entered 
is ; " : ' {;; " ' •.••policy^f* -y-^ u-: ■ : . -;c= ; ; 

(in) a means coupled with said card processor, chip for providing an 
; » , operative connection between the card 1 and said a card reader-writer 

/ ;;• v device; ' 'c • V .-' -.- : ': 

r: ., ,v t (i v ) a SO uree 6f< energy coupled , with said cardj processor chip and card 

' 2<ir ' memory unit. i ■ ~> v.-.-.... 

10: r The system of any one of the preceding claims wherein the smart card 
i 1 further comprising: :. - : • ' r : * 

(i) a card keypad coupled with said card processor chip for typing a 
25 personal information data onto the card; 

' ' (ii) ' a >card display coupled^with said card processor chip for monitoring the 
-' - •.' • personal iriformationfentered in the card. ' <? \;x;>.> t ..... y 
4 i te. l -~...\.:.if. : v.-" v ,u (tlwjc ;n- «•>"/• vc i.%r„' v **•-•• i J.-,v.-".v" iu* 
*V- f -: r "i -^The system of claim 10~wherein the perecmal:mfoirmation dataware personal 
30 codes for locking and reactivating the card. = c . • % 
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12. The system of claim 10 wherein, said -smart card is integrated with a 
computer for transforming a value, of one predetermined, ^cun;ency intp, a value of 
another predetermined currency. 

; ^ 13. ' v For use in the system according anyone of ; claims 4 to 12 r a preexisting 
bank account of the authorized user. - v^-i- i >c ;^ k > < x ; a v ; m: 

^14; ; For use in the system according;^ 12, a central server 

^10 - apparatus of tHe card provider configured to be, in access with a preexisting bank 
> account of an authorized user, said central server apparatus having: , . f 

K '.■■) <Y-('a) axentral. computer; = /I r ^ -„;u; Pr-ai » ,.e s -;, -j; 

- • '• (b) a storage device coupled with said central computer. ^ v 

15 15. For use in the system according anyone of claims 4 to 12, an at least one 
- ^terminal coupled with said central server apparatus ^comprising: ; 
h - 5 (a^ a policy intro from the 

x 5 > authorized user for setting and reloading the policy in the card; 

^ Y (b) a card reader- writer device for entering the policy; and , 
20 (c) a display for monitoring policy statement entries, .card's history and 

statistics. 

- H 16^ ? For use in the system according anyone: of claims 4 to smart card 
storing data indicative of a policy that provides a possibility to any authorized user 
25 selectively to set and change limits on the card's usage, said limits are at least one 
member from the group including: (i) a limit on the available; currency amount to a 
' v -" predeteimined m^im is allowed 

c v - to spent for each specific item; <iii) aii appropriate time period during which the 
payment can - be executed; -(iv) a * selected territory where the . payment can be 
30^ executed; (v) selected retail-establishments whereiij the payment can^be executed; 
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(vi) a frequency of times when the payment can be executed; (vii) a specific set of 
items for receiving which- the payment can be executed; (viii) a specific set of 
f t services for' receiving which the payment can be executed. .... . -../,. 

5 17. A program storage device readable by machine, tangibly embodying a 
"pro to perform method steps for 

supervising a usage of a smart card for payments for goods or services by debiting 
at least one preexisting currency account having a balance with an available 

* -*cuiTCftcV J amouht^ the m<etlf6d'1fi0]iudiiig;-the step o£ setting a specification of said 
io smart -card by entering into electronic memory of the card a policy that provides a 

possibility to any authorized ^'User selectively to set* and: change i.limits^on the card's 
usage, said limits are at least one member from the group, including: (i) a limit on 
the available -currency maximum amount; (ii) a limit on 

the currency value that is allowed to spent for each specific item; (iii) an 
is i appropriate timejperidd during which the payment can be executed; (iy) a selected 
territory where the payment can be executed; (v) selected retail -establishments 
" wherein the payment can beVexecuted; (vi) a frequency, of times when the payment 
can be executed; (vii) a specific set of items for receiving which the payment can 
be executed; (viii) a specific set -oflservices for receiving, which the payment can be 
"-'20 executed. - • - r - v - v ' V r 'C' ■ j .-.r tlI-v .... r > * m < v 

18. A computer program product comprising a computer useable medium 
v 1 having computer readable program: code embodied therein for supervising a usage 
? 6f a smart card for, payments for goods- or service^ by debiting at least one 
25 preexisting currency account having .a. balance with an .available currency .amount, 
said Computer readable program? code . for causing ; the computer to set a 
specification of said smart card .by centering into electronic r memory of the card a 
*" policy thit i; provides a possibiUty to any authorized , user selectively; to set and 
- - change* limits 4 on the card's-: usage, said limits: are :at least- one member from the 

* -30 "group intluding:;>(i) ^a -limit ontthe/available, currency, -amount to a. predetermined 



* 
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maximum amount; (ii) a limit on the cun-ency value that is allowed to spent for 
each specific item; (iii) an appropriate time period during which the payment can 
be executed; (iv) a selected territory where the payment can- be executed; (v) 
selected retail establishments wherein the payment can be ; executed; (vi) a 
5 frequency of times when the payment can be executed; (vii) a specific set of items 
for receiving which the payment can be executed; (viii) a specific set of services for 
, receiving which the payment can be executed. ~ 
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